One-click install
npx skills add https://github.com/mattnowdev/super-review --skill super-review-kubernetes
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: super-review:kubernetes
Source: https://github.com/mattnowdev/super-review/tree/main/skills/kubernetes
Command: npx skills add https://github.com/mattnowdev/super-review --skill super-review-kubernetes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill reduces production incidents and security exposure by identifying Kubernetes manifest anti-patterns that tools like kube-linter/kubeval may miss or downplay.

Core Features & Use Cases

  • Production-readiness checks: Detects missing or unsafe configurations for probes, resources, disruption budgets, and rollout behavior.
  • Security hardening guidance: Flags container/pod securityContext weaknesses (root execution, privileged mode, missing seccomp) and unsafe volume patterns (hostPath).
  • Network and secrets safety: Surfaces missing NetworkPolicy defaults and unsafe secret handling (secrets in env).

Quick Start

Use the kubernetes review reference when your PR diff includes Kubernetes YAML or Helm/Kustomize/K8s manifests to get a checklist of hardening and reliability gaps the change should address.

Frequently Asked Questions about super-review:kubernetes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I catch Kubernetes YAML security risks before merging to prod?

Kubernetes YAML security risks are caught by reviewing PR diffs that touch Pod, Deployment, or NetworkPolicy manifests to identify unsafe securityContext settings, privileged mode, and hostPath volumes before production deployment.

What Kubernetes manifest anti-patterns cause production reliability issues?

Kubernetes manifest anti-patterns causing reliability issues include missing resource specifications, incomplete probes, absent disruption budgets, and improper rolling update strategies that slip past basic linters and trigger production regressions.

How do I check Helm and Kustomize manifests for missing NetworkPolicy defaults?

Helm and Kustomize manifests are checked for missing NetworkPolicy defaults by scanning manifest directories within PR diffs to surface workloads lacking network isolation rules and unsafe secret handling in environment variables.

Does this Kubernetes review tool check container securityContext for root execution?

This Kubernetes review tool checks container securityContext to flag root execution, privileged mode, missing seccomp profiles, and unsafe volume patterns like hostPath that expose clusters to security vulnerabilities.

What is the best way to harden Kubernetes workload manifests during code review?

The best way to harden Kubernetes workload manifests during code review is applying manifest-aware detection to validate resource limits, probes, affinity rules, disruption budgets, and workload securityContext against production-readiness standards.

Why does kube-linter miss Kubernetes deployment reliability problems in my YAML?

kube-linter may miss Kubernetes deployment reliability problems because it downplays complex manifest anti-patterns like improper rolling update strategies, missing disruption budgets, and incomplete affinity rules that require deeper manifest-aware analysis.